Key Responsibility:
You will be responsible to perform walkthrough, design/ perform/ review tests of controls either independently or as part of our team utilizing our integrated IT audit approach of IT application controls. You can expect to work with external & internal client/s personnel to execute compliance, financial and operational risk projects.
Skills and attributes for success:
- Experienced in conducting IT general control reviews, application controls testing, key report controls and reviewing SOC reports and auditing key reports for SOX compliance
- Plan, monitor & manage operational delivery to ensure adherence to agreed quality parameters & timelines. Implement work management trackers, define roles & responsibilities of team members and roll out a work allocation / delivery plan to track completion
- Work with on-shore managers to agree on scope of work, key stakeholders, escalation matrices, project milestones & timelines
- Design & Implement management information systems (MIS) for periodic status updates and to identify trends around business processes identified as high on risk / low on controls
- Participate in operational responsibilities with team members basis project requirements. Evolve as the face of team to review working papers, draft observations & communicate them to key stakeholders
- Demonstrate excellent project management skills, inspire teamwork and responsibility with engagement team members, and use current technology/tools to enhance the effectiveness of deliverables and services
- Introduced to concepts of Big Data Analytics, Automation & Process Digitalization in various business processes. Ability to identify opportunities, drive POC (Proof of Concept), manage un-certainty & define success parameters
- Exceptionally good understanding of EXL Consulting and its service lines and actively assess what the firm can deliver to service clients
- Familiarity with tools and technologies such as Active Directory, UNIX, SQL, Oracle, Mainframes, Cloud, or at least one major ERP such as SAPOracleWorkday
- Knowledge of cyber security and information security frameworks such as NIST, SANS, CSC
- Effectively discuss all control weaknesses with Management, propose recommendations for controls and professionally reach agreement in a timely manner as to required actions; within IT audit management and IT clients at all levels.
- Holds relevant industry certifications such as CISA, CISSP, CISM, CEH, ISO 27001 LA, IA etc.
- A good understanding of IT data center operations and a variety of technology platforms.
- Exposure of reviewing ITGC and ITAC over various ERPs
- Excellent communication, documentation and report writing skills
- Ability to interact and establish relationships across all levels
Experience & Professional Pre-Requisites
- 4+ years of professional experience in areas of risk & compliance (operational risk, SOX compliance, internal audit, IT application reviews etc.).
- Bachelor's degree in Technology/Computer Science/Information Systems
- Certifications such as CISA, CISSP, CISM, CEH, ISO 27001are highly desirable but not mandatory for candidates with excellent IT audit experience
- Strong understanding of IT Risks, System Infrastructure auditing concepts and standards